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PARAMETER TRANSIENT BEHAVIOR ANALYSIS ON 
FAULT TOLERANT CONTROL SYSTEM* 


Jong-Yeob Shin' 


ABSTRACT 

In a fault tolerant control (FTC) system, a parameter varying FTC law is reconfigured 
based on fault parameters estimated by fault detection and isolation (FDI) modules. 
FDI modules require some time to detect fault occurrences in aero-vehicle dynamics. 
This paper illustrates analysis of a FTC system based on estimated fault parameter 
transient behavior which may include false fault detections during a short time interval. 
Using Lyapunov function analysis, the upper bound of an induced-/^ norm of the 
FTC system performance is calculated as a function of a fault detection time and the 
exponential decay rate of the Lyapunov function. 


1 INTRODUCTION 

In the past decades, there has been interest in a FTC system which has ability to detect ac- 
tuator/sensor faults automatically, and to prevent faults from developing into system failure. 
Especially, in designing a flight control system, it has been researched for achieving single 
aircraft accident prevention [1, 2, 3, 4, 5]. An active FTC system requires its control law 
to react to actuator/sensor faults through reconfiguration and fault detection and isolation 
(FDI) modules to detect actuator /sensor fault occurrences. FTC law synthesis for aerospace 
vehicles has been studied since 1980’s based on possible faults on actuators and sensors [2], 
Recently, using linear matrix inequality (LMI) optimization solutions [3, 4, 5], linear pa- 
rameter varying (LPV) FTC laws are designed, based on an open-loop system modeled as 
a function of fault parameters. In the LPV-FTC synthesis procedure, it is assumed to be 
imminently identified by separate fault detection and isolation (FDI) modules. FDI modules 
are designed, based on only an open- loop system and applied in a closed-loop system [5, 6, 7]. 
In general, FDI modules and FTC laws are individually designed, without considering the 
other dynamics [4, 5]. 

After individually designing an LPV-FTC law and FDI modules, analysis of a FTC system 
is required to validate the FTC laws and FDI modules together. A typical way of analyzing 
a FTC system is nonlinear simulation with the pre-defined command inputs (not all possible 
command inputs), for possible fault scenario. It is hard to provide a generic criteria of a 
FTC system via nonlinear simulations. A FTC system analysis frame work is required to 
provide a certain criteria of a FTC system related with characteristics of FDI modules. 

This work was supported by the National Aeronautics and Space Administration under NASA Contract 
No. NAS1-02U7. 

t Staff Scientist, National Institute of Aerospace (NIA), Hampton, VA 23666. Email: shinjySnianet . org 


1 



Usually, FDI modules can not detect faults at the moment a fault occurs. There is always 
some level of time delay to detect faults regardless of FDI algorithms such as an LPV-FDI 
filter [7] and an extended Kalman FDI filter [5]. During the delay time interval, the dynamics 
of the closed-loop system may not be in the pre-dehned set of systems used in the LPV-FTC 
law synthesis procedure [5]. It is also possible that during the time interval, FDI modules 
may detect false faults which represent faults on healthy actuator/sensors. In this paper, 
the signal provided by FDI modules is parameterized and dynamics changes due to signal 
changes during the time interval are modeled as parameter transient behavior of an LPV 
system. It is possible that the parameter transient behavior includes that the system is 
locally unstable for a short time interval. 

For that case, conventional LPV performance analysis methodologies can not be used since 
all systems are required to be locally stable for any fixed scheduling parameters. One of the 
LPV performance analysis methodologies with brief instabilities is developed in Ref. [8], 
using the main concept of switching system analysis. Modifying the analysis, in this paper, 
the upper bound of the induced-/^ norm of the closed-loop system is calculated in terms of 
possible delay time interval (a characteristic of FDI modules) and exponential decay rates 
of the Lyapunov function. A generic analysis framework of a FTC system is presented, 
including false fault parameter estimation effects on closed-loop system dynamics. 

The analysis result of the proposed FTC system in this paper is one of indicators to find 
out which LPV-FTC law generates less performance degradation due to parameter transient 
behavior. In this paper, it is demonstrated by applying this FTC analysis frame work to a 
HiMAT FTC system designed in Ref. [5]. 

This paper contains the following sections. In section 2, a FTC system analysis problem 
is stated and an analysis methodology is described in section 3. In section 4, a HiMAT FTC 
system analysis is demonstrated. In section 5, this paper is concluded with a brief summary. 

2 PROBLEM STATEMENT 

In this section, analysis problems on a FTC system are described. The structure of a FTC 
system shown in Figure 1 is briefly described to carry out analysis problem objectives. A 
FTC system includes a FTC law, FDI modules and supervisory systems (logics). When a 
fault occurs, FDI modules and a supervisory system (logics) detect it and generate signals for 
evaluating/reconfiguring a FTC law. Assume that the designed FTC law can be represented 
as an LPV system or is designed using LPV synthesis methodologies in Ref. [9, 10, 5]. In 
this paper, FDI modules estimate fault parameters which can be converted into scheduling 
parameters of the designed FTC law via simple logics (see Fig. 1). 

Fault parameters p(t) represent actual fault occurrences on aero- vehicle dynamics P(p(t)). 
Assume that fault parameters pit) are in a piecewise continuous compact set T p C lZ ns 
to capture dynamics of abrupt fault occurrence. Since fault parameters are not directly 
measurable in real time via physical sensors, the parameters are estimated by FDI modules 
with estimation error bounds (6 P ). In practical terms, the size of 5 P is decided based on 
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characteristics of FDI modules and possible fault scenarios. The designed LPV controller 
K(p(t )) is evaluated based on the estimated fault parameters p{t) in a piecewise continuous 
compact set F p C lZ na . Based on the LPV synthesis methodology [5], the designed LPV 
controller K(p(t )) can robustly stabilize an aero- vehicle P(p) under fault occurrences, when 

p(t)tS(p,6„) :=( "Wl IM*)-P«II<<V 1 (1) 

I P £ 1 pi P £ 1 pi 0<(5 p J 

When a fault occurs, FDI modules require some time for estimated fault parameters to 
satisfy the condition: p{t ) G S(p(t), 5 P ). The required time is called as detection time for FDI 
modules, hereafter. During the detection time interval, it is possible that fault parameters 
p{t ) are not in a set S(p(t), 5 P ) since 5 P is generally chosen as smaller values than the entire 
range of p{t) variation. The performance and stability for the closed-loop system is not 
guaranteed for the case: p{t) ^ S(p(t),5 p ) since the LPV control law is designed only for 
the case: p{t) E S(p(t),5 p ). During the interval, parameter transient behavior [5] of the 
closed-loop system is observed for the case: p{t) ^ S(p(t),5 p ). When the time interval is 
long, the performance of the closed-loop system can be noticeably degraded and stability of 
the system can be also changed. 

In order to analyze performance degradation and stability of the system, the closed-loop 
FTC system G(p,p ) is modeled as 

x = A(p,p)x + B(p,p)d, ^ 

e =C(p,p)x + D(p,p)d, 

where x G 7 Z nx , d G 1Z nd and e G lZ ne . All the matrices have compatible dimensions. Note 
that the fault parameters p and estimated fault parameters p are treated as independent 
parameters in an analysis frame work. 

The entire parameter space is defined as 

'P ■= {(p(t),p(t)) I p(t) e F P ,p(t) e Fp} (3) 

and is divided into m subspaces V t such that 

m 

V = U Vi :=V 1 UV 2 ---U Vm, 

1=1 (4) 

0 =v i nv j , % ± j, i el, j ex, 

P := {1,2, ••• ,m}. 

Local and global stability of the closed-loop system G(p,p) in Eq. (2) are defined over 
parameter subspaces as follows: 
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Definition 1 Local and global stability: 

Suppose there exists a positive definite matrix P such that 

aT (p,p) p + pA (p,p) < °> (p,p)eP (5) 

then the system is globally stable over the entire parameter set. When the condition in Eq. (5) 
is satisfied over only subsets Vi, the system is locally stable. 

To analyze system dynamics changes due to parameter transient behavior, it is necessary 
to introduce duration time of the system over each subspace. 

Definition 2 Duration time T p . over each subspace: 

T Pi (t 0 ,t) = f <Ji(p(s),p(s))ds$ Vf > t 0 > 0, (6) 

J to 

[ 0, (p(s),p(s)) i Vi, 

°i{p(s),p(s)) = < 1 , (p(s), p(s)) € Vi, (V 

{ i e 1. 

A duration time is bounded as 

T 0i +Pi{t~ t 0 ) < T p . < T 0 . +ai(t - t 0 ) (8) 

where 0 < /3j < a* < 1 and 0 < T a .. The constant a, represents a ratio of total time of 
interest to duration time over the i-th subspace. For example, when the system stays in the 
i-th snbspace for all time, the constant a* should be one. When the system never stays in 
the i-th subspace for all time, the constant a.i should be zero. 

In this paper, we consider possible local instability over a subspace because FDI modules 
can generate false fault detection signals during the detection time interval. Without loss 
of generality, consider the case that the system is locally unstable in the m-th subspace. 
The constant a m < 1 takes an important role in stability analysis to represent asymptotic 
stability ratio [8], which is related with stability margin of the system. In this paper, the 
constant a m is interpreted as tolerance of the false detection of FDI modules for the closed- 
loop system [11], For example, if the system is stable with the larger number of a m , it 
implies that the system can stay in the m-th subspace longer. 

In this paper, the subspace V\ is defined when p(t) e S(p(t),5 p ). For practicality, assume 
that the closed-loop system stays in the subspace V\ for the most of the time of interest, 
since the FTC law is designed for it [5]. During the detection time interval, the closed- loop 
system stays in the parameter subspaces V%, i G I — {1}. The stability margin of the system 
over the entire parameter space can be described as a function of the constants c^, i £ X. 
Also, the performance degradation level can be represented as an induced-/^ norm of the 
closed-loop system over the entire parameter space. 
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3 ANALYSIS METHOD 


In this section, the analysis problems described in the previous section are formulated into 
LMI forms. 

3.1 Stability Analysis 


m— 1 

Recall that the closed-loop system G(p, p) in Eq. (2) is locally stable in the set of Vi and 

i= 1 

locally unstable in the parameter subset V rn . 

Proposition 1: Suppose there exists a positive definite matrix P(p) such that 


A T (p , p)P + PA(p, p) + P < —A iP, (p, p) e P h iel - {m}, 
A T (p, p)P + PA(p, p) + P < kP, (p, p) e P m , 

where 

0 < k, 0 < A* < Ai, iel— {1, m }. 

The system is exponentially stable with a decay rate: 

m— 1 

A = Ai — ^(Ai — A j)a.i — (Ai + n)a m 
1=2 


(9) 


( 10 ) 


( 11 ) 


under the condition: 

A min 

Qlm ^ • T ~ 5 

^ min ' ft 

where A m * n = min{A^}, i G X — {m}. 

The proof is follows. Set a Lyapunov function as V = x T (t)P(p)x(t), P € P nxXnx 
Eq. (9), the time derivative of the Lyapunov function is 


( 12 ) 


Using 


V < — AjV, (p, p) e Pi, iel - {m}, (13) 

V < kV, (p, p) e P rn . (14) 

From Eqs. (13) and (14), 

^y < i T n+K T PmV(t 0 ), Vt > t a > 0. (15) 


Taking the upper bound of the duration time over each parameter subspace, Eq. (15) is 
rewritten as: 

y < A(i — io)+EI4 2 1 (Ai-Ai)T 0i -|-(Ai-|-K)T 0m Y(tfi 

where 

m— 1 

A := Ai — ^(Ai — A i)cx.i — (Ai + n)a m - 

i = 2 


(16) 

(17) 
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Without loss of generality, the constant Ai can be set as max{Aj},i G X — {m}. Thus, the 
term Ai — Ai is always positive over the parameter subspaces V , , i G X — {l,m}. The lower 
bound of the constant A is 


m— 1 

A > At . Ai ^(Ai ^min)(%i (Ai (18) 

i = 2 

When the condition Eq. (12) is satisfied, it is easily noticed that the system is exponential 
stable such that A t > 0. 

In this paper, the exponential decay rate is of interest to analyze a closed-loop system 
which may have local instability over a parameter subspace. The constant cq represents 
the upper bound of asymptotic instability ratio [8]. In the analysis of a FTC system, the 
constant a t can be interpreted as tolerance of instability during the detection time interval. 
For example, a t = 0.1 implies that the closed-loop system can stay in the parameter subspace 
V m for 10 % of the total interest time without loss of exponential stability. 

Given fault tolerant controllers, we can analyze the closed-loop system in terms of a 
constant a t value. The stability analysis problem can be formulated into an optimization 
problem as: 

max a t , 

K!>0,A m ^ n >0 (19) 

s.t Eq.(9) 

In this paper, the optimization is solved by checking feasibility of the LMI constraints in 
Eq. (9) with a line searching method over the constant A* and n values. 

3.2 Performance analysis 

For the closed-loop system in Eq. (2), the induced-/^ norm is defined as: 

sup Mp (20) 

(p,p)ev,dec 2 ,\\d\\2^o \ m\2 

It is interesting to determine the induced-/^ norm from disturbance d to error e with pa- 
rameter transient behavior during a detection time interval. 

Proposition 2: Suppose there exists a positive definite matrix P(p) G 7 Z nxXnx such that 
(p,p)eVi, «Gl-{m}, 

A T {p , p)P{p) + P(p)A{p, p) + P(p) + \P{p) P(p)B(p, p) 

B T (p,p)P(p) -I 

7 -'Cip) 7 - x D{p) 


7 1 C T (p,p) 
7 ~ 1 D T (p) 

-I 


< 0 , 


( 21 ) 
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(Pi p) ^ 'P my 

>(p, p)P(p) + P(p)A(p , p) + P{p) - «P(p) P(p)B(p, p) 7 _1 C T (p, p)j 

P r (p,p)P(p) -/ 7"^ T (P,P) <a 

7 _1 C'(P,P) T l D{p,p) -I 

The induced- C 2 norm from d to e of the closed-loop system is no larger than M 7 where 


M~ = 7I 


' Ai)T 0i +(Ai+«)T 0m \ 


A;, — Ai — ^^(Ai — A f)Pi — (Ai + /c)/3 m , 


A — Ai — y " (Ai — A i)oii — (Ai + 




Under the condition a m < a t — — — — r, the constant A is always positive such that 

(A min P ri) 

A > Ab > 0. 

The proof is follows. Set V = x T (t)P(p)x(t), then the time derivative of a Lyapunov 
function V is 


V < -XiV + ||d|| 2 - 7 2 ||e|| 2 , (p,p)eVi, iel-{m}, 

V < kV + ||d|| 2 - 7 _2 | |e| |-, (p,p)eV m - 


| 2 -7- 2 ||e|| 2 , 


Eqs. (21) and (22) describe the condition Eq. (24). The Lyapunov function is rewritten as: 
V(t) < e f ^V(t 0 ) + [* e^ s,t \\\d(s)\\ 2 — 7 -2 ||e(s)|| 2 )ds, (25) 


f(s,t) = -Ai (t - s -^2T Pi (s,t)) A iT p .(s,t) + K,T Pm (s, t). (26) 

i =2 i = 2 

Since V(t) >0, \/t > t a > 0, the following inequality equation is extracted from Eq. (25). 

7 -2 ( e^ s ' t] \\e(s)\\ 2 ds < e^ to ^V(t 0 ) + [ e^ s,i '\\d(s)\\ 2 ds, Vt > t 0 > 0. (27) 


Using Eq. (8) and the definition of A and A & in Eq. (23), it is easily derived that 

ry~ ^ £>— s) | | g(g) | | ^dS 7 (fPi=2 t^l - ^)U"f"hl+ K )tl m - ^Uto)y(^) 

_|_ ^i)T 0 i +{^l+K)T 0rn — \(t— s) | 1^(5) | | 2 ds. 
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Integrating both sides of Eq. (28) over the interval (t 0 , oo ) leads to 




e(s)\\ 2 ds < 


^(^) r EIho 1 (Ai-A,;)T 0 .+(Ai+K)T 0 . 1 r Y.™-p(\i-\i)T 0 i +(\o+K)T„ 

A ~ + A 


Thus, the upper bound of the induced-^ norm M 7 is 



||d(s)|| J ds. 

(29) 


M 7 = 7I 


< eET^i^-^oi+^i+^TomXh 

A 


(30) 


The constant M 7 represents the upper bounds of the worst-case performance level under 
parameter transient behavior which includes possible local instability. Thus, the performance 
analysis problem is formulated into an optimization problem: 

min M 7 ( min 7 ), 

Ai>0,K>0 p & Tln x xn x (g-Q 

s.t. Eq.(21), (22). 

The minimization 7 problem at fixed Aj and k is an LMI problem. However, the optimization 
problem in Eq. (31) is not an LMI problem in terms of A j, k and 7 with P. Also, the solution 
7 is highly related with Aj and k values. In this paper, line searching over possible Aj and k 
ranges is used to find a solution of the optimization problem. 

Note that this analysis does not require that the positive matrix P is a function of the 
estimated parameters p. Based on behaviour of estimated parameters by the FDI modules, 
the matrix P can be set as a constant positive matrix or a function of parameter over the p 
variations. The constant positive matrix can allow abrupt change of the estimated parameter 
but leads to conservative analysis results. It will be demonstrated via the following example. 

4 EXAMPLE 

In this section, the proposed analysis methodology is demonstrated by application to a FTC 
system. Using the analysis, it is possible to indicate which FTC law is tolerant of possible 
false detection signal and generates less performance degradation for parameter transient 
behaviors during the detection time interval. 

4.1 FTC HiMAT System 

The FTC HiMAT system [5] consists of an on-line FDI system with simple logics, the dy- 
namics of a HiMAT vehicle shown in Figure 2, and a designed LPV-FTC law. The HiMAT 
vehicle dynamics is taken from the /^-synthesis Toolbox [12] and is modeled as an LPV sys- 
tem. The LPV model has two inputs: elevons 5 e and canards S c ; two outputs: angle of 
attack a in radians and pitch angle 6 in radians; and four states: velocity V in ft/sec, angle 



of attack a, pitch rate q in rad/sec, and pitch angle 6. The LFT-LPV model of the HiMAT 
vehicle is 


x = Ax + B 

Tl 

0 

u + B 

0.1 

0 


.0 

t 2 _ 


. 0 

0.1. 


(32) 


z — u, y = Cx, 


(33) 


w = Az, A 


A 0 

.0 S 2 _ 


(34) 


where the detailed elements of the system matrices A, B , and C are in Ref. [5]. The estimated 
scheduling parameter p is defined using simple logics as 


0 < p < 1 : 0 <Ti<1,t 2 = 1 Elevon failure 

P = 1 : n = 1, f 2 = 1 

1 < p < 2 : fi = 1, 0 < f 2 < 1 Canard failure. 

The on-line FDI model [5] estimates fault parameters f\ and r 2 using the two-stage optimal 
Kalman filter [5, 13]. Based on the estimated fault parameters, the estimated scheduling 
parameter p is defined via the simple logics. 

LPV-FTC laws Ka{p ) and Kb{p ) are designed without a scaling factor using conventional 
LPV control synthesis methodology in Ref. [10] and with a scaling factor using a robust LPV 
synthesis methodology [5], based on the LPV-HiMAT model with estimated error bound 0.1. 
The closed-loop responses with the controllers K a and Kb are simulated for the possible 
fault scenario of the canards failing at 1 sec and are shown in Figure 3, respectively. The 
right plots in Figure 3 are magnifications of the left plots. Based on Figure 3, there is very 
little difference between Ka and Kb responses with steady state parameter estimates and 
pitch angle time responses. The simulation results in Figure 3 show that the detection time 
interval is about 0.5 sec from t = 1 sec to t = 1.5 sec. During the interval, a scheduling 
parameter p is 2, which indicates canard failure. The estimated parameter p, however, is not 
2 during the interval. It is easily observed that the condition pit) e S := (p||p — p| < 0.1} 
is not satisfied during the interval. However, overall simulation results show that the closed- 
loop system is stable and achieves the desired performance objective defined in Ref. [5] since 
the detection time interval is short in the simulation (less than 0.5 sec). 

It is noticed, using linear analysis at fixed parameters, that the eigenvalues of the closed- 
loop system with Ka or K B are positive at fixed parameters p — 0 and p — 2. When p > 0.1, 
the closed-loop system is stable at fixed parameters. This leads to the FTC HiMAT system 
being locally unstable for the short interval. 
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constant matrix P 

Controller 

Ai 

a 2 

K 

OL t 

K a 


0.042 

0.041 

7.65 

5.3xl0~ 3 

K b 


0.042 

0.038 

4.96 

7.6xl0 -3 

parameter dependent P(p) 

K a 


0.041 

0.039 

7.6 

5.1xl0“ 3 

K b 


0.034 

0.032 

3.7 

8.6xl0- 3 


Table 1: Stability analysis results 


4.2 Stability Analysis 

To apply the stability analysis methodology described in section 3, the parameter set V is 
divided into three subspaces for this example. Set the subspaces as 


Vi 

= {(P,P) 

1 P = 2, 

0.9 < p < 2}, 

V-2 

= {{p,P) 

1 P = 2, 

0.1 < p < 0.9}, 

Vs 

= {(P,P) 

P — 2, 

0.0 < p < 0.1}. 


Note that when p G Vi, the condition pit ) G S(p, 0.1) is satisfied. Recall that the condition 
is used in designing an LPV-FTC law. When p G P 2 , the closed-loop system is locally stable 
but the condition is not satisfied. When p G 'P 3 , the closed-loop system is locally unstable. 

The LMI constraints in Eq. (9) are evaluated at grid points p G {0,0.1, 0.2, • • • ,2} over 
the parameter subspaces. In order to solve the optimization problem in Eq. (19) with 
LMI constraints in Eq. (9), the ranges of Ai, A 2 , and k are defined as 0.01 < Ai < 0.1, 
0.01 < A 2 < 0.1, and 5 < k < 10, respectively. With fixed Ai , A 2 , and k values in each range, 
the feasibility of the LMI constraints is checked with a constant matrix P and a parameter 
dependent matrix P(p), respectively. Using a parameter dependent matrix P(p), the time 
derivative p is required to determine P = p dP Qp ■ In this example, it is assumed that \p\ < 1, 
based on the FDI module characteristics. The parameter dependent matrix P(p) is described 
using basis functions. 

P{p) = P a + P>P\ + -P 2 , constant P a 12 G 7 Z nxn , (36) 

P 

where n is the closed-loop state order. The optimization results are in Table 1. Recall that the 
constant a t represents the ratio of possible duration time over the unstable parameter space 
to total time. Based on the calculated a t values, both FTC laws have similar tolerance to 
possible false fault detection in the stability of the closed-loop system. When two controllers 
are compared, the controller Kb has slightly better tolerance. It is also shown in Table 1 that 
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constant matrix P 

Controller Ai 

A2 

K 

7 

K a 

3 x 10” 3 

1 x 10" 3 

9.4 

0.42 

K b 

6 x 10" 4 

1 x 10“ 4 

5.85 

2.14 

parameter dependent P(p) 

K a 

6 x 10~ 4 

1 x 10“ 4 

9.4 

0.34 

K b 

6 x 10” 4 

1 x 10“ 4 

3.7 

0.63 


Table 2: Performance analysis results 


the analysis with parameter dependent P leads to less conservative results on the controller 
Kb- 


4.3 Performance Analysis 


It is of interest to know how much performance of the closed-loop system degrades due to 
parameter transient behaviors. To analyze the closed-loop performance, the desired response 
function T % and the performance weighting function W p in Figure 4 are defined as 


T 

-L l 


1 

s/0.8 + 1 ’ 


W p = 


s/ 50 + 

/ 0.05 + 1 ' 


(37) 


Note that the weight functions are, also, used in an LPV control synthesis in Ref. [5]. Recall 
that minimizing the upper bound M 7 of the induced-/^ norm from d to e is not in convex 
optimization, since Ai, A2, and n are highly related with 7 in Eq. (23). Using line searching 
over the Ai, A 2 , and n ranges, the analysis results are calculated in Table 2. When T os is fixed 
as 0.2 sec, the upper bound of the induced-£ 2 norm is calculated as 0.68 for Ka and 2.87 
for Kb with constant matrix P and 0.54 for Ka and 0.84 for Kb with parameter dependent 
matrix P(p). 

It is noticed from Eq. (31) that the time constants T 0 . are not related with optimized 
Ai, A 2 , k, and 7. Thus, with fixed n, Ai, A 2 , and 7 values for each controller, the M 7 
variations are calculated due to T Q3 changes and are shown in Figure 5. It is observed from 
Figure 5, that performance analysis results are significantly different using constant matrix 
P and a parameter dependent matrix P(p). Based on performance analysis result with a 
parameter dependent matrix P(p), it is easily noticed that when a false fault detection time 
is short (T 03 < 0.22 sec), the M 1 with the Ka controller is less than that with the Kb 
controller. When a false fault detection time is long (T G3 > 0.22 sec), the M 1 values are vise 
versa. The analysis results imply that Ka controller leads to less performance degradation 
for the T 03 < 0.22 sec case and K R controller leads to less performance degradation for the 
T 03 > 0.22 sec case. 
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Recall that M 1 in this FTC system analysis represents the upper bound of the induced 
norm of || 6 — 0ideai\\2 from a given command j|d|| 2 - In order to validate the FTC system 
performance analysis results, the closed-loop system is simulated with assumption of false 
fault detection T Q3 = 0.1, 0.2, 0.4 and 0.8 sec for each controller, respectively. 

In Figure 6, the error between pitch angle responses and ideal responses 9 ideal are plotted 
for each case. It is obviously noticed that the error norm of | \6— 9id ea i 1 1 2 with the Ka controller 
is larger than that with the K B controller at the T 3 = 0.4 and 0.8 sec cases. Also, the error 
norm with the Kb controller is larger than that with the Ka controller at the T 03 = 0.1 
and 0.2 sec cases. The parameter dependent analysis results in Figure 5 correspond to the 
simulation results in Figure 6. Note that using this analysis tool, we can calculate the upper 
bound variation of the induced-/^ norm due to T 02 variation which represents parameter 
transient time. In this example, Ai and A 2 are too small to see effects of T 02 variations. 

5 CONCLUSION 

In this paper, the FTC system analysis problem is formulated into the optimization problem 
subject to LMI constraints which are evaluated at grid points over the stablc/unstable pa- 
rameter subspaces. From the stability analysis, the tolerance of false fault detection which 
causes local instability can be calculated for a FTC system to achieve exponential stability. 
From the performance analysis, the upper bound of the induced-/^ norm of the FTC system 
represents worst-case performance during the detection time intervals of FDI modules. The 
norm bound is calculated as a function of detection time interval and exponential decay 
rates over each parameter subspace. It indicates performance degradation clue to parameter 
transients during the interval in which the closed-loop system may be locally unstable. In 
this paper, the usage of the FTC system analysis is demonstrated via the analysis of the 
FTC HiMAT system. 
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Figure 2: HiMAT vehicle. 
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Figure 3: Nonlinear simulations of a FTC HiMAT Vehicle. 
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Figure 5: Variations of M 1 due to T 03 changes. 
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Figure 6: 


Simulation results with different T 03 values: 


0.1, 0.2, 0-4 and 0.8 sec. 
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